RDBye

Proof-of-concept tool which enables shutting down servers exposing RDP to the internet which allow remote shutdown

Please use this tool within an exclusive VM to not interfer with the automatic mouse movements and/or getting your private data screenshotted.

Also, you need a Linux Distribution like Kali Linux with Xorg (not Wayland) to work since automatic mouse movements have been disabled in Wayland.

Installation

git clone https://github.com/NexusFuzzy/RDBye
python3 -m venv .
source bin/activate
pip3 install -r requirements.txt
sudo apt install wmctrl scrot python3-tk python3-dev rdesktop python3-pil gnome-screenshot

Usage

+-+-+-+-+-+
|R|D|B|y|e|
+-+-+-+-+-+

usage: RDBye [-h] [-s SHODAN] [-i IP_ADDRESS] [-r]

Script to exploit RDP to shut down remote hosts

options:
  -h, --help            show this help message and exit
  -s SHODAN, --shodan SHODAN
                        JSON file exported from shodan.io
  -i IP_ADDRESS, --ip_address IP_ADDRESS
                        Single IP address as target
  -r, --redline         Downloaddd Redline Command & Control servers from Tria.ge (API key required)

Remarks

rdbye relies on a screen resolution of 1690x920 to find the correct buttons. Please ensure that you are using this screen resolution within your virtual machine

Pivoting on existing IP addresses

You might be interested in another tool I created (pyvot) to get more IP addresses you could be interested in: https://github.com/NexusFuzzy/pyvot

Known issues

If you get the error Xlib.error.DisplayConnectionError: Can't connect to display ":0": b'Authorization required, but no authorization protocol specified\n'

please run the following command:

xhost +SI:localuser:$(whoami)

Get results from Shodan